Comments (4)
This is a known issue that we currently have with the issuer plugin. There are two things you'll need to do to fix this issue
-
Checkout the cleanup branch (see this PR: #53)
git fetch -a
git checkout cleanup
-
We recommend using an IAM User with the plugin currently. See instructions here: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html#Using_CreateAccessKey. Your IAM User will need to have at minimum permissions listed here: https://github.com/cert-manager/aws-privateca-issuer#configuration
export AWS_SECRET_ACCESS_KEY=<Secret Access Key you generated>
export AWS_ACCESS_KEY_ID=<Access Key you generated>
After doing these two steps, I was able to run the local tests after recreating your issue. Please let us know if you are successful!
Edit: You may want to run kind delete cluster pca-external-issuer
before you test just so youβre running a fresh run as well
from aws-privateca-issuer.
Thank you for raising this issue with the AWS Private CA Issue plugin. We have reviewed your submission and replicated the issue you raised. The issue has been prioritized with our support and engineering teams. We will reach out to you if we have additional questions and will provide a notification when the issue is resolved.
from aws-privateca-issuer.
Interesting!
I fixed the issue by patching the manager pod with deploy-patch.yaml
spec:
template:
spec:
containers:
- name: manager
env:
- name: AWS_REGION
value: "us-east-1"
kubectl patch deploy aws-privateca-issuer-controller-manager -n aws-privateca-issuer-system --patch "$(cat deploy-patch.yaml)"
.PHONY: deploy-cert-manager
deploy-cert-manager: ## Deploy cert-manager in the configured Kubernetes cluster in ~/.kube/config
kubectl apply --filename=https://github.com/jetstack/cert-manager/releases/download/v${CERT_MANAGER_VERSION}/cert-manager.yaml
kubectl wait --for=condition=Available --timeout=300s apiservice v1.cert-manager.io
kubectl patch deploy aws-privateca-issuer-controller-manager -n aws-privateca-issuer-system --patch "$(patch-deploy.yaml)"
and updated the Makefile to use this patch until you all merge that in.
Let me try your fix by rebasing the open PR you referenced.
from aws-privateca-issuer.
Looks good after applying patch above. I see now where it adds the Region to the spec.
from aws-privateca-issuer.
Related Issues (20)
- [Feature Request]: Integration with cert-manager 1.10 HOT 4
- [Bug]: Using the default version causes image pull failures HOT 4
- Integration with cert-manager, istio-csr fails pod to pod mTLS. HOT 5
- [Bug]: Image Tag in Helm Chart doesn't match Contianer Image Tag HOT 9
- topologySpreadConstraints support in helm chart HOT 6
- [Bug]: cert-manager.io/cluster-issuer annotation does not work for AWSPCAClusterIssuer HOT 12
- [Feature Request]: helm chart: support optional podDisruptionBudget HOT 1
- [Feature Request]: Documentation of useage with ingress annotations HOT 2
- [Bug]: panic: runtime error: invalid memory address or nil pointer dereference HOT 8
- security HOT 3
- [Feature Request]: Support temporary AWS credentials (including AWS_SESSION_TOKEN) HOT 1
- [Bug]: Error: failed to sts.GetCallerIdentity when using IRSA HOT 11
- [Bug]: awspca-issuer not using secretRef to obtain CA HOT 7
- [Feature Request]: Issue image out of more official ECR Public Repo HOT 2
- [Feature Request]: Support ARM64 architecture HOT 4
- [Feature Request]: Add feature to call kubernetes secrets for the AWSPCAClusterIssuer spec.arn value HOT 3
- [Bug]: Issuer is not ready and certificate creation fails HOT 10
- [Bug]: Connection to AWS PCA not working HOT 5
- [Feature Request]: Replace deprecated `set-output` command with environment file HOT 1
- [Troubleshoot]: Reconciler error StorageError: invalid object, Code: 4 HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
π Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. πππ
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google β€οΈ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aws-privateca-issuer.